Cilium - v1.10.18

Summary of Changes

Bugfixes:
* Clear stale CNP status nodes if updates have been disabled (Backport PR #22582, Upstream PR #20366, @pippolo84)
* Fail validate-cnp preflight check if a CiliumClusterwideNetworkPolicy is using an empty toEndpoints/fromEndpoints selector (Backport PR #22582, Upstream PR #21990, @thorn3r)
* Fix bug that could lead to inconsistent pod IP information between agents, sometimes leading to a failure to decrypt IPsec traffic. (Backport PR #22310, Upstream PR #22127, @aanm)
* Fix bug where configuring the API rate limiter options could fail when providing multiple options (Backport PR #22753, Upstream PR #22299, @thorn3r)
* Fix forwarding of the security identity by the DNS proxy which could cause random policy denials (Backport PR #22454, Upstream PR #22361, @aspsk)
* Fix GC of CEPs that were not GCed by kube-apiserver (Backport PR #22310, Upstream PR #22213, @aanm)

CI Changes:
* .github: Explicitly set build-commits job runner image version and install libtinfo5 (Backport PR #22330, Upstream PR #22315, @chancez)
* .github: fix bpf-checks on ubuntu-latest runner (Backport PR #22330, Upstream PR #22322, @julianwiedmann)

Misc Changes:
* .github/workflows: split the image tag update in two steps (Backport PR #22262, Upstream PR #22268, @aanm)
* .github/workflows: use right event type for auto labeler (Backport PR #22582, Upstream PR #22508, @aanm)
* .github: add PR labeler for external contributions (Backport PR #22582, Upstream PR #22461, @aanm)
* Add automatic creation of Cilium base images (Backport PR #22262, Upstream PR #22179, @aanm)
* bpf: Remove FIB lookup for IPsec (Backport PR #22310, Upstream PR #22069, @pchaigno)
* build(deps): bump actions/setup-go from 3.3.1 to 3.4.0 (#22484, @dependabot[bot])
* build(deps): bump actions/setup-go from 3.4.0 to 3.5.0 (#22710, @dependabot[bot])
* build(deps): bump actions/upload-artifact from 3.1.0 to 3.1.1 (#22272, @dependabot[bot])
* build(deps): bump github/codeql-action from 2.1.32 to 2.1.35 (#22496, @dependabot[bot])
* build(deps): bump github/codeql-action from 2.1.35 to 2.1.36 (#22634, @dependabot[bot])
* build(deps): bump github/codeql-action from 2.1.36 to 2.1.37 (#22759, @dependabot[bot])
* build(deps): bump helm/kind-action from 1.4.0 to 1.5.0 (#22709, @dependabot[bot])
* build(deps): bump KyleMayes/install-llvm-action from 1.6.0 to 1.6.1 (#22593, @dependabot[bot])
* chore(deps): update base-images (v1.10) (#22148, @renovate[bot])
* daemon/cmd: Fix error handling for getting proxy port (Backport PR #22582, Upstream PR #22296, @christarazi)
* docs: add instructions to build the base images from external forks (Backport PR #22582, Upstream PR #22304, @aanm)
* docs: Fix kubectl create output in docs after some deployments have moved from K8s "extensions" to "apps". (Backport PR #22582, Upstream PR #22002, @cleverhu)
* gha: Pin ubuntu-20.04 for conformance-test-ipv6 (Backport PR #22330, Upstream PR #22324, @sayboras)
* images: update cilium-{runtime,builder} (#22458, @aanm)
* k8s: don't consider 4xx a successful interaction (Backport PR #22582, Upstream PR #22393, @bimmlerd)

Other Changes:
* .github/workflows: install promtool from binary release (#22343, @jrajahalme)
* install: Update image digests for v1.10.17 (#22240, @michi-covalent)

Docker Manifests

cilium

docker.io/cilium/cilium:v1.10.18@sha256:2f96bbe989f3c53e4170ba934810b2d5f10b96446559563df0834a69b744b043
quay.io/cilium/cilium:v1.10.18@sha256:2f96bbe989f3c53e4170ba934810b2d5f10b96446559563df0834a69b744b043

clustermesh-apiserver

docker.io/cilium/clustermesh-apiserver:v1.10.18@sha256:c7b7e62466b59ff478b02ab8e3424bba38590e0f6efc2aa10f800e228d96ffbd
quay.io/cilium/clustermesh-apiserver:v1.10.18@sha256:c7b7e62466b59ff478b02ab8e3424bba38590e0f6efc2aa10f800e228d96ffbd

docker-plugin

docker.io/cilium/docker-plugin:v1.10.18@sha256:743702482ef7f34f533681fc86dfec7f296e1370d3f745b85f955a04a6b285d1
quay.io/cilium/docker-plugin:v1.10.18@sha256:743702482ef7f34f533681fc86dfec7f296e1370d3f745b85f955a04a6b285d1

hubble-relay

docker.io/cilium/hubble-relay:v1.10.18@sha256:d3ab1dfe252184249a3914b1973eedcbe8bdf654417c0cea4e634d8fd01e56f7
quay.io/cilium/hubble-relay:v1.10.18@sha256:d3ab1dfe252184249a3914b1973eedcbe8bdf654417c0cea4e634d8fd01e56f7

operator-alibabacloud

docker.io/cilium/operator-alibabacloud:v1.10.18@sha256:ef122f01674357af1f5d03bbdf3ff0064bef55717fb9f9fdd67dcc493257d126
quay.io/cilium/operator-alibabacloud:v1.10.18@sha256:ef122f01674357af1f5d03bbdf3ff0064bef55717fb9f9fdd67dcc493257d126

operator-aws

docker.io/cilium/operator-aws:v1.10.18@sha256:b1df8223c7f22ec71929c2f333a0627947b32950c5ac19e297b6b86c7c272e5b
quay.io/cilium/operator-aws:v1.10.18@sha256:b1df8223c7f22ec71929c2f333a0627947b32950c5ac19e297b6b86c7c272e5b

operator-azure

docker.io/cilium/operator-azure:v1.10.18@sha256:8210bd8158cbf12c490530cc610e861e58ab78469a3ee4022034d35c7cda2882
quay.io/cilium/operator-azure:v1.10.18@sha256:8210bd8158cbf12c490530cc610e861e58ab78469a3ee4022034d35c7cda2882

operator-generic

docker.io/cilium/operator-generic:v1.10.18@sha256:6deac7dfe9f8b18f03f88eaa88be73c2b27109ce220f42eef326e22369c863ae
quay.io/cilium/operator-generic:v1.10.18@sha256:6deac7dfe9f8b18f03f88eaa88be73c2b27109ce220f42eef326e22369c863ae

operator

docker.io/cilium/operator:v1.10.18@sha256:e9ab722fcbbcf73f93cfe7f213f36d1bcd374f57050661aafc125e8eff73f897
quay.io/cilium/operator:v1.10.18@sha256:e9ab722fcbbcf73f93cfe7f213f36d1bcd374f57050661aafc125e8eff73f897